I wonder if the European Data Protection laws would mean that an individual could bring a case against an ISP, a mailing list archive, or some other entity that allowed the individuals email address to be leaked to a spammer or other entity ? Naturally, this wouldn't solve the problem entirely, but it may reduce impact. Matthew.